wafconfg.xml

Doppala, Karthik kdoppala at it.ucla.edu
Fri Oct 21 18:07:22 BST 2011


Scott,

Its actually whitelisting the IDP's and by that I mean filtering a selected few entityId's from the metadata files. Since SP's are also needed to be included in the filter list there is a scope for updating the wayfconfig.xml file on a regular basis which we would like to avoid.



Thanks,

Karthik



On 10/20/11 6:14 PM, "Doppala, Karthik" <kdoppala at it.ucla.edu<mailto:kdoppala at it.ucla.edu>> wrote:



>I have a question regarding the wayfconfig file. We have certain Idp?s

>and SP?s included in a white list and would be including SP?s on a

>regular basis to this list but the issue is; we would have to restart

>the service whenever a change is made to the wayfconfig.xml which we

>are not in favor of.  I was wondering if there is a way we could avoid

>restarting the service. Any help is appreciated.



There's not.



I don't know exactly what you mean by whitelisting SPs, the DS doesn't generally do anything but use metadata for SPs to enforce response locations, it doesn't maintain a list of them for any other reason that I know of.



-- Scott


From: Doppala, Karthik
Sent: Thursday, October 20, 2011 3:14 PM
To: 'users at shibboleth.net'
Subject: wafconfg.xml

Hello All,
I have a question regarding the wayfconfig file. We have certain Idp's and SP's included in a white list and would be including SP's on a regular basis to this list but the issue is; we would have to restart the service whenever a change is made to the wayfconfig.xml which we are not in favor of.  I was wondering if there is a way we could avoid restarting the service. Any help is appreciated.

Thanks,
Karthik
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111021/f5caf939/attachment.html 


More information about the users mailing list